FreeBSD 12

FreeBSD 12 — ja-wordpress — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ja-wordpress — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: wordpress — multiple issues Related CVEs: CVE-2013-0235 CVE-2013-0236 CVE-2013-0237 CVE-2013-2199 CVE-2013-2200 CVE-2013-2201 CVE-2013-2202 CVE-2013-2203  +12 more Upstream summary: wordpress developers reports: This security and maintenance release features 1 bug fix […]

Read more
FreeBSD 12 — openvpn-polarssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — openvpn-polarssl — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenVPN — out-of-bounds write in legacy key-method 1 Related CVEs: CVE-2017-12166 CVE-2017-7478 CVE-2017-7479 CVE-2017-7508 CVE-2017-7512 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 Upstream summary: Steffan Karger reports: The bounds check in read_key() was performed […]

Read more
FreeBSD 12 — bitcoin-daemon — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — bitcoin-daemon — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bitcoin — Denial of Service and Possible Mining Inflation Related CVEs: CVE-2018-17144 Upstream summary: Bitcoin Core reports: CVE-2018-17144, a fix for which was released on September 18th in Bitcoin Core […]

Read more
FreeBSD 12 — openssh — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — openssh — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openssh — multiple vulnerabilities Related CVEs: CVE-2006-4924 CVE-2006-5051 Upstream summary: Problem Description The CRC compensation attack detector in the sshd(8) daemon, upon receipt of duplicate blocks, uses CPU time cubic […]

Read more
FreeBSD 12 — mysql81-server — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mysql81-server — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Upstream summary: Oracle reports: 36 new security patches for Oracle MySQL. 11 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over […]

Read more
FreeBSD 12 — lshell — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — lshell — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lshell — Shell autocomplete reveals forbidden directories Upstream summary: lshell reports: The autocomplete feature allows users to list directories, while they do not have access to those paths (issue #109). […]

Read more
FreeBSD 12 — libsrtp — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libsrtp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libsrtp — DoS via crafted RTP header vulnerability Related CVEs: CVE-2015-6360 Upstream summary: libsrtp reports: Prevent potential DoS attack due to lack of bounds checking on RTP header CSRC count […]

Read more
FreeBSD 12 — ghostscript-afpl-nox — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — ghostscript-afpl-nox — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — insecure temporary file creation vulnerability Related CVEs: CVE-2004-0967 Upstream summary: Ghostscript is affected by an insecure temporary file creation vulnerability. This issue is likely due to a design […]

Read more
FreeBSD 12 — node-devel — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — node-devel — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: node, iojs, and v8 — denial of service Related CVEs: CVE-2015-5380 Upstream summary: node reports: This release of Node.js fixes a bug that triggers an out-of-band write in V8's utf-8 […]

Read more
How to Configure MySQL Primary-Replica Replication on FreeBSD 12 — step-by-step FreeBSD 12 tutorial on Progressive Robot

How to Configure MySQL Primary-Replica Replication on FreeBSD 12

Introduction Deploying configure mysql primary-replica replication on freebsd 12 on a FreeBSD 12 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard […]

Read more
CHAT